EP2251789B1 - Input/output module for sensors and/or actuators exchanging information with two central processing units - Google Patents

Input/output module for sensors and/or actuators exchanging information with two central processing units Download PDF

Info

Publication number
EP2251789B1
EP2251789B1 EP10159301A EP10159301A EP2251789B1 EP 2251789 B1 EP2251789 B1 EP 2251789B1 EP 10159301 A EP10159301 A EP 10159301A EP 10159301 A EP10159301 A EP 10159301A EP 2251789 B1 EP2251789 B1 EP 2251789B1
Authority
EP
European Patent Office
Prior art keywords
input
output module
central unit
central
communication means
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
EP10159301A
Other languages
German (de)
French (fr)
Other versions
EP2251789A1 (en
Inventor
Philippe Pleche
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
ABB AG Germany
Original Assignee
ABB AG Germany
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by ABB AG Germany filed Critical ABB AG Germany
Publication of EP2251789A1 publication Critical patent/EP2251789A1/en
Application granted granted Critical
Publication of EP2251789B1 publication Critical patent/EP2251789B1/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B9/00—Safety arrangements
    • G05B9/02—Safety arrangements electric
    • G05B9/03—Safety arrangements electric with multiple-channel loop, i.e. redundant control systems
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G06F11/2038—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant with a single idle spare processing component
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16—Error detection or correction of the data by redundancy in hardware
    • G06F11/20—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements
    • G06F11/202—Error detection or correction of the data by redundancy in hardware using active fault-masking, e.g. by switching out faulty elements or by switching in spare elements where processing functionality is redundant
    • G06F11/2023—Failover techniques
    • G06F11/2025—Failover techniques using centralised failover control functionality

Definitions

  • the present invention relates to an output input module and a programmable industrial programmable controller for detecting a failure and / or for securing an electrical system comprising such an input / output module.
  • Programmable logic controllers are used in the industry to automate actuator control processes from instructions generally derived from a computer program running on a CPU and exploiting data that may come from different sensors.
  • modules comprising input / output extensions on which these actuators and sensors are connected.
  • These modules have the particularity of being easily replaced because their electrical connections to the industrial programmable logic controller is ensured by means of fixed bases on standard rails located in an electrical cabinet.
  • the two central units are in permanent connection, which allows them to exchange diagnostic information and status of the various components of the installation.
  • the detection of a fault is based essentially on the communication between the two central units and on the flow of a maximum response time from one central unit to another.
  • the information exchanges between the central units and the input / output modules are carried out according to several cycles defining frames and determined by the program of the central units which is based on a clock frequency of one of the central units.
  • the detection of errors and the subsequent reaction depends on the diagnosis of the central units and the interpretation and verification of the redundancy information. These interpretations and verifications occur after the reception of each frame. Also, it is desirable to shorten the detection time.
  • the document EP-A1-1,517,200 discloses a backup controller with a first CPU comprising a first processor communicating with a first memory unit in which a backup program and a standard program are stored, and a second CPU comprising a second processor independent of the first processor and communicating with a second memory unit independent of the first memory unit and storing only the backup program. Synchronization programs run the standard program of the first CPU and the backup programs of the first and second CPUs and then compare the execution of the two standby programs to enter a backup state if the execution of both rescue programs differ.
  • This document describes a system in which two central units are permanently in communication and in which the detection of a fault is based on the communication between the two central units. This document does not describe an input / output module with processing means, these being arranged in the central units.
  • the document US-B1-6,449,732 describes a control system running an application to control the information returned by multiple control elements.
  • the controller includes a plurality of processors that execute the application in parallel and at least one processor input / output module that receives and transmits the information to said control elements and communicates with its respective processor. Three identical channels are used in each of the input / output modules in a Triple Modular Redundancy (TMR) configuration.
  • TMR Triple Modular Redundancy
  • Each of the processors includes a dedicated input / output module.
  • each processor communicates and synchronizes with other processors via a high speed bus.
  • the input / output control processor on each of the processors controls the transmission of output data to the output modules through a triple input / output bus.
  • the processing means are included in the central units and not in the input / output modules. Like the preceding document, this document describes a system in which two central units are permanently in communication and in which the detection of a fault is based on the communication between the central units.
  • the invention aims to solve all or part of these disadvantages.
  • the present invention relates to an input / output module for sensors and / or actuators comprising at least first communication means intended for communication with a first central unit via a first field bus, and at least second communication means for communicating with a second central unit via a second fieldbus comprising processing means arranged to establish a selection of a primary central unit between the first central unit and the second central unit taking into account: the operating state of each of the field buses provided by the first bus and the second bus respectively communicating with the first communication means and the second communication means, the operating states or stopping each of the central units provided by the first means of communication and the second means respectively communication, and the consultation of information provided by the first CPU and the second CPU communicating respectively with the first communication means and the second communication means, and for controlling the outputs of the input / output module as a function of the information received from the selected primary CPU.
  • the module through its processing means is able to assign priority to the selection of commands to be taken into account from the two central units.
  • the module selects the most consistent information to control the process and possibly move to a fallback solution that takes into account the latest valid values or default values.
  • establishing an order of importance reduces the reaction time because the information does not need to be checked again to meet the redundancy requirements.
  • the processing means operate with any type of central unit and input / output extension modules provided for any industrial programmable logic controller.
  • the processing means are arranged to send to the two central units information concerning, for example, the state of the cabling, the state of the other central unit and / or the consistency of the information exchanged between the two units. power stations.
  • This arrangement allows the input / output module to inform the central units about the state of the components of the system involved in the process and the progress of this same process.
  • the module by its processing means can thus inform the central units on the cabling, the state of the other central unit, and the consistency of information exchanged.
  • the processing means are arranged to compare the signals provided by the two communication means in order to check their coherence.
  • the processing means are arranged to control the outputs of the input / output module according to a last coherent value received and / or a default value.
  • This arrangement allows the process to take into account only consistent values of sensors whose inclusion does not have aberrant effects on the action of the actuators.
  • This arrangement makes it possible to detect a difference corresponding to a cutoff such as a short circuit.
  • the input / output module comprises a local display device information.
  • This arrangement allows an operator to immediately locate the origin of a fault and thus allows a faster maintenance intervention.
  • a connector base can be arranged to connect on the one hand the input / output module and on the other hand the two fieldbus each connected to the two central units.
  • This arrangement allows a great modularity in the use of different modules in the same electrical system.
  • the present invention also relates to an assembly comprising an input / output module according to the invention and input / output extension modules connected to sensors and / or actuators but also a modular programmable logic controller comprising at least a first central unit and a second central unit, the two central units being arranged to execute the same program, at least first communication means intended for communication with the at least one first central unit via a first bus of field, and at least second communication means for communication with the at least one second central unit via a second fieldbus, at least one input / output module according to the invention, at the at least one sensor and / or at least one actuator connected to the input / output module intended respectively for controlling and controlling an industrial process.
  • the redundancy of the modular programmable logic controller is no longer based on direct communication between the two central units, which makes it possible to shorten decision-making times.
  • a programmable industrial programmable controller 1 comprises two central units 2a, 2b connected to their respective base 3a, 3b; decentralized input / output extensions 4 connected to the bases 3a, 3b of the two central units 2a, 2b via two field buses 5a, 5b; input / output modules 6 connected to their bases (not shown) connected by an internal electrical circuit to the decentralized input / output extensions 4.
  • the programmable industrial programmable logic controller 1 can comprise up to four communication modules 7 locally backed to the central units 2a, 2b, and other decentralized input / output extensions 4 with other input modules. / outputs 6 but connected to the inputs / outputs of the first decentralized extension.
  • the communication modules 7 allow connection to the various standard fieldbus systems such as the central units 2a, 2b and allows integration with existing networks. As illustrated on the figure 1 , the communication modules 7 use the existing Ethernet network, which frees the fieldbus 5a, 5b from the communication between the two central units 2a, 2b. Only the control of the coherence of the information exchanged between the two central units 2a, 2b is ensured by the field buses 5a, 5b.
  • the input / output module comprises processing means 9 constituted for example by a microprocessor, which allows the shaping of the signals, the communication and the transfer of the data.
  • Each input / output module 6 comprises a local display device 8 for determining the line controlling the process, the state of the lines and central units 2a, 2b, the defects or the absence of defects.
  • the input / output modules 6 can operate with signals of the binary or analog type.
  • Fieldbus 5a, 5b are exclusive master / slave fieldbus; the communication on these buses is in series and is made by a selective call: the master sends a request to the slave and receives its response.
  • Each of the fieldbus 5a, 5b comprises several frames with communication network centers 13a, 13b. These frames allow the reading and writing of data from the process.
  • the communication with the central units 2a, 2b is bidirectional and is carried out through the communication means 13a, 13b through the two fieldbus 5a, 5b by sending frames.
  • Each frame has the following information.
  • the frame comprises information on the operating state of the central unit 2a or 2b on which the input / output module 6 is connected, as well as information on the state of the fieldbus 5a or 5b.
  • the frame includes information on the operating status of a fieldbus 5a or 5b. It is for example possible that this information consists of a variable switching between two values each sending a frame between the module and one of the central units 2a or 2b. If the value of the variable remains constant when sending two successive frames, then the input / output module 6 will interpret this information as a fault of the fieldbus 5a or 5b considered.
  • Each frame also includes information from a central unit to the inputs / outputs.
  • the primary central unit will therefore preferably be that connected by a fieldbus in operation, this central unit being itself in operation and providing coherent information.
  • a default central unit can be chosen for example according to the connection location to the input / output module.
  • the frames transmitted from an input / output module 6 to one of the central units 2a or 2b contain the following information.
  • the frame includes information indicating to the central unit 2a or 2b whether it is for the input / output module 6 of the primary central unit or whether it is for the input / output module 6 of the secondary CPU.
  • the frame includes information on the consistency of the information exchanged with the two central units 2a and 2b.
  • each frame comprises information on the coherence of digital signals and information on the coherence of analog signals, the input / output modules 6 being able to operate with signals of the binary or analog type.
  • the frame comprises information on the state and / or the presence of another fieldbus connected to the input / output module 6, the state of the cabling, the state and / or the presence of another unit central connected to the input / output module 6, any conflicts of instructions.
  • Each of the central units 2a, 2b receives and first decodes the data from the processing means 9 of the input / output module 6 ("RI").
  • This data contains information concerning the state of the other central unit 2a or 2b, the status of the fieldbus 5a and 5b, the state of the input / output module 6 and the state of the connected sensors or actuators. to him whose information received is represented on the figure 2 by the solid arrows 10 pointing to the edge of the input / output module 6.
  • This information is analyzed in a certain order by several functions of an "HA" part of the program of each of the central units 2a, 2b separated into blocks.
  • function block "DIAG” which makes it possible to analyze the state of the fieldbus 5a or 5b according to the central unit considered
  • CONTROL which controls the data exchanges between the two central units 2a and 2b through the Ethernet link 12 between the two central units 2a, 2b via the input / output module 6 and which defines the central unit primary 2a
  • the function block "DATA” which collects all information from the primary CPU 2a and creates a data table which is transferred to the secondary CPU 2b via the fieldbus 5a and 5b connected to the input / output module 6.
  • the data transfer may take more than one cycle.
  • These processing means are able to select the data to be taken into account among the data sent by the two central units 2a and 2b.
  • the input / output module 6 then transmits this data to the sensors or actuators connected to the inputs / outputs thereof.
  • This transmitted information is represented on the figure 2 by the solid arrows 11 coming from the edge of the input / output module 6.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Quality & Reliability (AREA)
  • General Engineering & Computer Science (AREA)
  • Automation & Control Theory (AREA)
  • Programmable Controllers (AREA)
  • Control By Computers (AREA)
  • Selective Calling Equipment (AREA)
  • Exchange Systems With Centralized Control (AREA)
  • Arrangements For Transmission Of Measured Signals (AREA)

Abstract

The module (6) has communication units communicating with central units (2a, 2b) by fieldbuses (5a, 5b), respectively. A processing unit i.e. microprocessor, establishes selection of a primary central unit from the central units by taking into account a functioning state of each fieldbus, a functioning state of each central unit and consultation of information provided by the central units. The processing unit controls outputs of the module according to information received from the primary central unit. An independent claim is also included for a modular programmable industrial automaton comprising a sensor and/or an actuator.

Description

La présente invention concerne un module d'entrée sortie ainsi qu'un automate programmable industriel modulable pour la détection d'une défaillance et/ou pour la sécurisation d'un système électrique comprenant un tel module d'entrée/sortie.The present invention relates to an output input module and a programmable industrial programmable controller for detecting a failure and / or for securing an electrical system comprising such an input / output module.

Les automates programmables sont utilisés dans l'industrie afin d'automatiser des processus de commande d'actionneurs à partir d'instructions provenant généralement d'un programme informatique exécuté sur une unité centrale et exploitant des données pouvant provenir de différents capteurs.Programmable logic controllers are used in the industry to automate actuator control processes from instructions generally derived from a computer program running on a CPU and exploiting data that may come from different sensors.

Suivant l'application, l'interface entre l'unité centrale et les différents actionneurs et capteurs est assurée par des modules comprenant des extensions d'entrée/sortie sur lesquelles sont branchés ces actionneurs et capteurs. Ces modules ont la particularité d'être facilement remplacés car leurs connexions électrique à l'automate programmable industriel est assurée par l'intermédiaire d'embases fixes sur des rails normalisés se trouvant dans une armoire électrique.Depending on the application, the interface between the central unit and the various actuators and sensors is provided by modules comprising input / output extensions on which these actuators and sensors are connected. These modules have the particularity of being easily replaced because their electrical connections to the industrial programmable logic controller is ensured by means of fixed bases on standard rails located in an electrical cabinet.

Dans des systèmes nécessitant un niveau de disponibilité plus élevé, il est nécessaire de contrôler la fiabilité des informations échangées. Pour satisfaire à cette exigence, il est connu de disposer d'une seconde unité centrale pour assurer une redondance dans le contrôle/commande des différents processus.In systems requiring a higher level of availability, it is necessary to control the reliability of the information exchanged. To satisfy this requirement, it is known to have a second central unit to ensure redundancy in the control / command of the various processes.

A cet effet, les deux unités centrales sont en liaison permanente, ce qui leur permet d'échanger des informations de diagnostic et de statuts des différents composants de l'installation.For this purpose, the two central units are in permanent connection, which allows them to exchange diagnostic information and status of the various components of the installation.

Cependant, cette liaison nécessite l'utilisation d'unités centrales spécifiques avec un logiciel dédié pour pouvoir fonctionner. La redondance s'effectue alors soit en connectant les deux unités centrales aux différents modules par l'intermédiaire de deux bus de terrain dont les informations sont comparées en permanence, soit en effectuant un second contrôle de toutes les informations transitant à travers un unique bus de terrain.However, this link requires the use of specific CPUs with dedicated software to operate. The redundancy then takes place either by connecting the two central units to the different modules via two field buses whose information is constantly compared, or by carrying out a second check of all the information transiting through a single bus. ground.

Dans ces configurations, la détection d'une défaillance repose essentiellement sur la communication entre les deux unités centrales et sur l'écoulement d'un temps de réponse maximal d'une unité centrale à l'autre.In these configurations, the detection of a fault is based essentially on the communication between the two central units and on the flow of a maximum response time from one central unit to another.

Les échanges d'informations entre les unités centrales et les modules d'entrée/sortie se déroulent suivant plusieurs cycles définissant des trames et déterminés par le programme des unités centrales qui se base sur une fréquence d'horloge de l'une des unités centrales.The information exchanges between the central units and the input / output modules are carried out according to several cycles defining frames and determined by the program of the central units which is based on a clock frequency of one of the central units.

En cas de perte de liaison entre les deux unités centrales ou sans liaison entre celles-ci, la détection d'erreurs et la réaction qui s'en suit dépend du diagnostic des unités centrales et de l'interprétation et vérification des informations de redondance. Ces interprétations et vérifications surviennent après la réception de chaque trame. Aussi, il est souhaitable de raccourcir le délai de détection.In case of loss of link between the two central units or without connection between them, the detection of errors and the subsequent reaction depends on the diagnosis of the central units and the interpretation and verification of the redundancy information. These interpretations and verifications occur after the reception of each frame. Also, it is desirable to shorten the detection time.

Le document EP-A1-1 517 200 décrit un contrôleur de secours avec une première unité centrale comprenant un premier processeur communiquant avec une première unité de mémoire dans laquelle est stocké un programme de secours et un programme standard, et une seconde unité centrale comprenant un second processeur indépendant du premier processeur et communiquant avec une seconde unité de mémoire indépendante de la première unité de mémoire et stockant uniquement le programme de secours. Des programmes de synchronisation exécutent le programme standard de la première unité centrale et les programmes de secours de la première et de la seconde unité centrale puis compare l'exécution des deux programmes de secours pour entrer dans un état de secours si l'exécution des deux programmes de secours diffère.The document EP-A1-1,517,200 discloses a backup controller with a first CPU comprising a first processor communicating with a first memory unit in which a backup program and a standard program are stored, and a second CPU comprising a second processor independent of the first processor and communicating with a second memory unit independent of the first memory unit and storing only the backup program. Synchronization programs run the standard program of the first CPU and the backup programs of the first and second CPUs and then compare the execution of the two standby programs to enter a backup state if the execution of both rescue programs differ.

Ce document décrit un système dans lequel deux unités centrales sont en permanence en communication et dans lequel la détection d' un défaut est basée sur la communication entre les deux unités centrales. Ce document ne décrit pas un module d'entrée/sortie avec des moyens de traitement, ceux-ci étant disposés dans les unités centrales.This document describes a system in which two central units are permanently in communication and in which the detection of a fault is based on the communication between the two central units. This document does not describe an input / output module with processing means, these being arranged in the central units.

Le document US-B1- 6 449 732 décrit un système de contrôle exécutant une application pour contrôler les informations renvoyées par plusieurs éléments de contrôle. Le contrôleur comprend une pluralité de processeurs qui exécutent l'application en parallèle et d'au moins un module d'entrée/sortie par processeur qui reçoit et transmet l'information aux dits éléments de contrôle et qui communique avec son processeur respectif. Trois canaux identiques sont utilisés dans chacun des modules d'entrée/sortie dans une configuration de redondance modulaire triplée (TMR). Chacun des processeurs comprend un module d'entrée/sortie dédié. De plus, chaque processeur communique et se synchronise avec les autres processeurs par l'intermédiaire d' un bus à haute vitesse. Le processeur de contrôle d' entrée/sortie situé sur chacun des processeurs contrôle la transmission des données de sortie vers les modules de sortie par l'intermédiaire d' un bus d' entrée/sortie triple.The document US-B1-6,449,732 describes a control system running an application to control the information returned by multiple control elements. The controller includes a plurality of processors that execute the application in parallel and at least one processor input / output module that receives and transmits the information to said control elements and communicates with its respective processor. Three identical channels are used in each of the input / output modules in a Triple Modular Redundancy (TMR) configuration. Each of the processors includes a dedicated input / output module. In addition, each processor communicates and synchronizes with other processors via a high speed bus. The input / output control processor on each of the processors controls the transmission of output data to the output modules through a triple input / output bus.

Les moyens de traitement sont compris dans les unités centrales et non dans les modules d' entrée/sortie. Tout comme le document précédant, ce document décrit un système dans lequel deux unités centrales sont en permanence en communication et dans lequel la détection d' un défaut est basée sur la communication entre les unités centrales.The processing means are included in the central units and not in the input / output modules. Like the preceding document, this document describes a system in which two central units are permanently in communication and in which the detection of a fault is based on the communication between the central units.

L'invention visé à résoudre tout ou partie de ces inconvénients.The invention aims to solve all or part of these disadvantages.

A cet effet, la présente invention concerne un module d'entrée/sortie pour capteurs et/ou actionneurs comprenant au moins des premiers moyens de communication destinés à la communication avec une première unité centrale par l'intermédiaire d'un premier bus de terrain, et au moins des seconds moyens de communication destinés à la communication avec une seconde unité centrale par l'intermédiaire d'un second bus de terrain comprenant des moyens de traitement agencés : pour établir une sélection d'une unité centrale primaire entre la première unité centrale et la seconde unité centrale en prenant en compte : l'état de fonctionnement de chacun des bus de terrain fournies par le premier bus et le second bus communiquant respectivement avec les premiers moyens de communication et les seconds moyens de communication, les états de fonctionnement ou d'arrêt de chacune des unités centrales fournis respectivement par les premiers moyens de communication et les seconds moyens de communication, et la consultation d'informations fournies par la première unité centrale et la seconde unité centrale communiquant respectivement avec les premiers moyens de communication et les seconds moyens de communication, et pour contrôler les sorties du module d'entrée/sortie en fonction des informations reçues de l'unité centrale primaire sélectionnée.For this purpose, the present invention relates to an input / output module for sensors and / or actuators comprising at least first communication means intended for communication with a first central unit via a first field bus, and at least second communication means for communicating with a second central unit via a second fieldbus comprising processing means arranged to establish a selection of a primary central unit between the first central unit and the second central unit taking into account: the operating state of each of the field buses provided by the first bus and the second bus respectively communicating with the first communication means and the second communication means, the operating states or stopping each of the central units provided by the first means of communication and the second means respectively communication, and the consultation of information provided by the first CPU and the second CPU communicating respectively with the first communication means and the second communication means, and for controlling the outputs of the input / output module as a function of the information received from the selected primary CPU.

En fonction des renseignements fournis et de paramétrages initiaux, le module, par l'intermédiaire de ses moyens de traitement est capable d'affecter une priorité sur la sélection des commandes à prendre en compte provenant des deux unités centrales. En cas de défaillance sur cette sélection, le module sélectionne les informations les plus cohérentes pour contrôler le processus et éventuellement passer à une solution de repli prenant en compte les dernières valeurs valides ou bien des valeurs par défaut. De plus, l'établissement d'un ordre d'importance permet de réduire le temps de réaction car l'information n'a pas besoin d'être vérifiée de nouveau pour satisfaire aux exigences de redondance.Depending on the information provided and the initial settings, the module, through its processing means is able to assign priority to the selection of commands to be taken into account from the two central units. In the event of a failure on this selection, the module selects the most consistent information to control the process and possibly move to a fallback solution that takes into account the latest valid values or default values. In addition, establishing an order of importance reduces the reaction time because the information does not need to be checked again to meet the redundancy requirements.

Les moyens de traitement fonctionnent avec tout type d'unités centrales et modules d'extensions d'entrée/sortie prévus pour un quelconque automate programmable industriel.The processing means operate with any type of central unit and input / output extension modules provided for any industrial programmable logic controller.

Cette disposition permet d'utiliser des unités centrales existantes sur le marché et non spécialement prévues pour la redondance. Cela n'engendre donc pas les surcoûts qu'auraient engendrés l'utilisation d'unités centrales spécifiques qui auraient également nécessité le développement d'un logiciel d'interface de programmation lui aussi spécifique. De même, les différents capteurs et actionneurs ne nécessitent pas de connexions spécifiques pour être raccordés aux extensions d'entrée/sortie de chaque module.This arrangement makes it possible to use existing central units on the market that are not specifically designed for redundancy. This does not generate the additional costs that would have resulted from the use of specific CPUs that would also have required the development of a programming interface software also specific. Similarly, the various sensors and actuators do not require specific connections to be connected to the input / output extensions of each module.

Selon un mode de réalisation, les moyens de traitement sont agencés pour envoyer aux deux unités centrales des informations concernant par exemple l'état du câblage, l'état de l'autre unité centrale et/ou la cohérence des informations échangées entre les deux unités centrales.According to one embodiment, the processing means are arranged to send to the two central units information concerning, for example, the state of the cabling, the state of the other central unit and / or the consistency of the information exchanged between the two units. power stations.

Cette disposition permet au module d'entrée/sortie d'informer les unités centrales sur l'état des composants du système intervenant dans le processus et sur l'état d'avancement de ce même processus. Le module, par ses moyens de traitement peut ainsi renseigner les unités centrales sur le câblage, l'état de l'autre unité centrale, et sur la cohérence des informations échangées.This arrangement allows the input / output module to inform the central units about the state of the components of the system involved in the process and the progress of this same process. The module, by its processing means can thus inform the central units on the cabling, the state of the other central unit, and the consistency of information exchanged.

Selon un mode de réalisation, les moyens de traitement sont agencés pour comparer les signaux fournis par les deux moyens de communications afin de vérifier leur cohérence.According to one embodiment, the processing means are arranged to compare the signals provided by the two communication means in order to check their coherence.

Selon le même mode de réalisation, en cas d'incohérence des signaux fournis par les deux moyens de communications, les moyens de traitement sont agencés pour contrôler les sorties du module d'entrée/sortie en fonction d'une dernière valeur cohérente reçue et/ou d'une valeur par défaut.According to the same embodiment, in case of inconsistency of the signals provided by the two communication means, the processing means are arranged to control the outputs of the input / output module according to a last coherent value received and / or a default value.

Cette disposition permet au processus de ne prendre en compte que des valeurs cohérentes de capteurs dont la prise en compte n'a pas de répercussions aberrantes sur l'action des actionneurs.This arrangement allows the process to take into account only consistent values of sensors whose inclusion does not have aberrant effects on the action of the actuators.

Avantageusement, reconnaissant et comparant le nombre d'autres modules reliés à chacun des deux bus de terrain.Advantageously, recognizing and comparing the number of other modules connected to each of the two field buses.

Cette disposition permet de détecter une dififérence correspondant à une coupure tel un court-circuit.This arrangement makes it possible to detect a difference corresponding to a cutoff such as a short circuit.

Selon le même mode de réalisation, le module d'entrée/sortie comprend un dispositif d'affichage local des informations.According to the same embodiment, the input / output module comprises a local display device information.

Cette disposition permet à un opérateur de localiser immédiatement l'origine d'un défaut et permet donc une intervention de maintenance plus rapide.This arrangement allows an operator to immediately locate the origin of a fault and thus allows a faster maintenance intervention.

Une embase de connectique peut être agencée pour connecter d'une part le module d'entrée/sortie et d'autre part les deux bus de terrain reliés chacun aux deux unités centrales.A connector base can be arranged to connect on the one hand the input / output module and on the other hand the two fieldbus each connected to the two central units.

Cette disposition permet une grande modularité dans l'utilisation de différents modules dans un même système électrique.This arrangement allows a great modularity in the use of different modules in the same electrical system.

La présente invention concerne également un ensemble comprenant un module d'entrée/sortie selon l'invention et des modules d'extensions d'entrée/sortie reliés à des capteurs et/ou actionneurs mais aussi un automate programmable industriel modulable comprenant au moins une première unité centrale et une seconde unité centrale, les deux unités centrales étant agencées pour exécuter un même programme, au moins des premiers moyens de communication destinés à la communication avec l'au moins une première unité centrale par l'intermédiaire d'un premier bus de terrain, et au moins des seconds moyens de communication destinés à la communication avec l'au moins une seconde unité centrale par l'intermédiaire d'un second bus de terrain, au moins un module d'entrée/sortie selon l'invention, au moins un capteur et/ou au moins un actionneur reliés au module d'entrée/sortie destinés respectivement au contrôle et à la commande d'un procédé industriel.The present invention also relates to an assembly comprising an input / output module according to the invention and input / output extension modules connected to sensors and / or actuators but also a modular programmable logic controller comprising at least a first central unit and a second central unit, the two central units being arranged to execute the same program, at least first communication means intended for communication with the at least one first central unit via a first bus of field, and at least second communication means for communication with the at least one second central unit via a second fieldbus, at least one input / output module according to the invention, at the at least one sensor and / or at least one actuator connected to the input / output module intended respectively for controlling and controlling an industrial process.

La redondance de l'automate programmable industriel modulable n'est ainsi plus basée sur la communication directe entre les deux unités centrales ce qui permet de raccourcir les temps de prise de décision.The redundancy of the modular programmable logic controller is no longer based on direct communication between the two central units, which makes it possible to shorten decision-making times.

D'autres caractéristiques et avantages de l'invention selon un mode de réalisation préféré ressortiront de la description détaillée ci-après, prises en liaison avec des dessins qui illustrent, à titre d'exemple, les principes de l'invention.

  • La figure 1 est une représentation de l'agencement des unités centrales et des modules.
  • La figure 2 montre la pile de protocole des deux unités centrales ainsi que la séquence des opérations effectuée au cours d'un cycle de fonctionnement d'un automate programmable industriel modulable selon l'invention.
Other features and advantages of the invention according to a preferred embodiment will become apparent from the detailed description below, taken in conjunction with drawings which illustrate, by way of example, the principles of the invention.
  • The figure 1 is a representation of the layout of CPUs and modules.
  • The figure 2 shows the protocol stack of the two CPUs as well as the sequence of operations performed during a cycle of operation of a modular programmable logic controller according to the invention.

Comme montré sur la figure 1, un automate programmable industriel modulable 1 selon l'invention comprend deux unités centrales 2a, 2b branchés sur leur embase respective 3a, 3b ; des extensions d'entrée/sortie décentralisées 4 reliés aux embases 3a, 3b des deux unités centrales 2a, 2b par l'intermédiaire de deux bus de terrain 5a, 5b; des modules d'entrées/sorties 6 branchés sur leurs embases (non montrées) reliées par un circuit électrique interne aux extensions d'entrée/sortie décentralisées 4.As shown on the figure 1 , a programmable industrial programmable controller 1 according to the invention comprises two central units 2a, 2b connected to their respective base 3a, 3b; decentralized input / output extensions 4 connected to the bases 3a, 3b of the two central units 2a, 2b via two field buses 5a, 5b; input / output modules 6 connected to their bases (not shown) connected by an internal electrical circuit to the decentralized input / output extensions 4.

L'automate programmable industriel modulable 1 selon l'invention peut comprendre jusqu'à quatre modules de communication 7 adossés localement aux unités centrales 2a, 2b, et d'autres extensions d'entrée/sortie décentralisées 4 avec d'autres modules d'entrées/sorties 6 mais reliés aux entrées/sorties de la première extension décentralisée.The programmable industrial programmable logic controller 1 according to the invention can comprise up to four communication modules 7 locally backed to the central units 2a, 2b, and other decentralized input / output extensions 4 with other input modules. / outputs 6 but connected to the inputs / outputs of the first decentralized extension.

Les modules de communication 7 permettent un raccordement aux différents systèmes à bus de terrain standards comme les unités centrales 2a, 2b et permet une intégration aux réseaux existants. Comme illustré sur la figure 1, les modules de communication 7 utilisent le réseau Ethernet existant, ce qui libère les bus de terrain 5a, 5b de la communication entre les deux unités centrales 2a, 2b. Seul le contrôle de la cohérence des informations échangées entre les deux unités centrales 2a, 2b est assurée par les bus de terrains 5a, 5b.The communication modules 7 allow connection to the various standard fieldbus systems such as the central units 2a, 2b and allows integration with existing networks. As illustrated on the figure 1 , the communication modules 7 use the existing Ethernet network, which frees the fieldbus 5a, 5b from the communication between the two central units 2a, 2b. Only the control of the coherence of the information exchanged between the two central units 2a, 2b is ensured by the field buses 5a, 5b.

Le module d'entrée/sortie comprend des moyens de traitement 9 constitués par exemple par un microprocesseur, qui permet la mise en forme des signaux, la communication et le transfert des données.The input / output module comprises processing means 9 constituted for example by a microprocessor, which allows the shaping of the signals, the communication and the transfer of the data.

Chaque module d'entrée/sortie 6 selon l'invention comprend un dispositif d'affichage local 8 pour déterminer la ligne contrôlant le process, l'état des lignes et des unités centrales 2a, 2b, les défauts ou l'absence de défauts.Each input / output module 6 according to the invention comprises a local display device 8 for determining the line controlling the process, the state of the lines and central units 2a, 2b, the defects or the absence of defects.

Les modules d'entrées/sorties 6 peuvent fonctionner avec des signaux du type binaire ou alors analogique.The input / output modules 6 can operate with signals of the binary or analog type.

Les bus de terrain 5a, 5b sont des bus de terrain maître/esclave exclusif ; la communication sur ces bus se fait en série et s'effectue par un appel sélectif : le maître envoie une requête à l'esclave puis reçoit sa réponse.Fieldbus 5a, 5b are exclusive master / slave fieldbus; the communication on these buses is in series and is made by a selective call: the master sends a request to the slave and receives its response.

Chacun des bus de terrain 5a, 5b comprend plusieurs trames avec des centres de réseau communication 13a, 13b. Ces trames permettent la lecture et l'écriture des données issues du processus.Each of the fieldbus 5a, 5b comprises several frames with communication network centers 13a, 13b. These frames allow the reading and writing of data from the process.

Concernant les informations transmises d'une unité centrale 2a ou 2b vers un module d'entrées/sorties 6 à travers une trame d'un bus de terrain 5a ou 5b, la communication avec les unités centrales 2a, 2b est bidirectionnelle et s'effectue par l'intermédiaire des moyens de communication 13a, 13b au travers des deux bus de terrain 5a, 5b par l'envoi de trames.Regarding the information transmitted from a central unit 2a or 2b to an input / output module 6 through a frame of a fieldbus 5a or 5b, the communication with the central units 2a, 2b is bidirectional and is carried out through the communication means 13a, 13b through the two fieldbus 5a, 5b by sending frames.

Chaque trame comporte les informations suivantes.Each frame has the following information.

La trame comprend une information sur l'état de fonctionnement de l'unité centrale 2a ou 2b sur lequel le module d'entrées/sorties 6 est branché, ainsi que des informations sur l'état du bus de terrain 5a ou 5b.The frame comprises information on the operating state of the central unit 2a or 2b on which the input / output module 6 is connected, as well as information on the state of the fieldbus 5a or 5b.

Par exemple, si l'unité centrale 2a ou 2b fonctionne, alors elle enverra une valeur de fonctionnement, tandis que si l'unité centrale ne fonctionne pas alors une valeur d'arrêt sera fournie.For example, if the CPU 2a or 2b is running, then it will send an operation value, whereas if the CPU does not work then a stop value will be provided.

La trame comprend une information sur l'état de fonctionnement d'un bus de terrain 5a ou 5b. Il est par exemple possible que cette information consiste en une variable basculant entre deux valeurs à chaque envoi d'une trame entre le module et une des unités centrales 2a ou 2b. Si la valeur de la variable reste constante lors de l'envoi de deux trames successives alors le module d'entrée/sortie 6 interprétera cette information comme un défaut du bus de terrain 5a ou 5b considéré.The frame includes information on the operating status of a fieldbus 5a or 5b. It is for example possible that this information consists of a variable switching between two values each sending a frame between the module and one of the central units 2a or 2b. If the value of the variable remains constant when sending two successive frames, then the input / output module 6 will interpret this information as a fault of the fieldbus 5a or 5b considered.

Chaque trame comprend également des informations provenant d'une unité centrale à destination des entrées/sorties.Each frame also includes information from a central unit to the inputs / outputs.

A partir des informations ci-dessus, les moyens de traitement 9 sélectionnent une unité centrale primaire entre la première unité centrale 2a et la seconde unité centrale 2b en prenant en compte, de préférence dans l'ordre indiqué ci-dessous :

  • l'état de fonctionnement de chacun des bus de terrain 5a, 5b fournis par le premier bus 5a et le second bus 5b communiquant respectivement avec les premiers moyens de communication 13a et les seconds moyens de communication 13b,
  • les états de fonctionnement ou d'arrêt de chacune des unités centrales 2a, 2b, et
  • la consultation d'informations fournies par la première unité centrale 2a et la seconde unité centrale 2b.
From the above information, the processing means 9 selects a primary central unit between the first central unit 2a and the second central unit 2b taking into account, preferably in the order indicated below:
  • the state of operation of each of the field buses 5a, 5b provided by the first bus 5a and the second bus 5b respectively communicating with the first communication means 13a and the second communication means 13b,
  • the operating or stopping states of each of the central units 2a, 2b, and
  • the consultation of information provided by the first central unit 2a and the second central unit 2b.

L'unité centrale primaire sera donc de préférence celle reliée par un bus de terrain en fonctionnement, cette unité centrale étant elle-même en fonctionnement et fournissant des informations cohérentes.The primary central unit will therefore preferably be that connected by a fieldbus in operation, this central unit being itself in operation and providing coherent information.

Dans le cas ou deux unités centrales remplissent ces conditions, une unité centrale par défaut peut être choisie par exemple en fonction de l'emplacement de raccordement au module d'entrées/sorties.In the case where two central units meet these conditions, a default central unit can be chosen for example according to the connection location to the input / output module.

Les trames transmises d'un module d'entrées/sorties 6 vers une des unités centrales 2a ou 2b contiennent les informations suivantes.The frames transmitted from an input / output module 6 to one of the central units 2a or 2b contain the following information.

La trame comprend une information indiquant à l'unité centrale 2a ou 2b s'il s'agit pour le module d'entrées/sorties 6 de l'unité centrale primaire ou s'il s'agit pour le module d'entrées/sorties 6 de l'unité centrale secondaire.The frame includes information indicating to the central unit 2a or 2b whether it is for the input / output module 6 of the primary central unit or whether it is for the input / output module 6 of the secondary CPU.

La trame comprend des informations sur la cohérence des informations échangées avec les deux unités centrales 2a et 2b. En particulier, chaque trame comprend une information sur la cohérence de signaux numérique et une information sur la cohérence de signaux analogiques, les modules d'entrées/sorties 6 pouvant fonctionner avec des signaux du type binaire ou bien analogique.The frame includes information on the consistency of the information exchanged with the two central units 2a and 2b. In particular, each frame comprises information on the coherence of digital signals and information on the coherence of analog signals, the input / output modules 6 being able to operate with signals of the binary or analog type.

La trame comprend des informations sur l'état et/ou la présence d'un autre bus de terrain relié au module d'entrée/sortie 6, l'état du câblage, l'état et/ou la présence d'une autre unité centrale reliée au module d'entrée/sortie 6, des éventuels conflits d'instructions.The frame comprises information on the state and / or the presence of another fieldbus connected to the input / output module 6, the state of the cabling, the state and / or the presence of another unit central connected to the input / output module 6, any conflicts of instructions.

Sur la figure 2, on peut voir les deux unités centrales 2a et 2b reliées chacune respectivement par l'intermédiaire des bus de terrain 5a et 5b à un module d'entrées/sorties 6. Les bus de terrain 5a et 5b sont chacun illustrés en deux parties afin de distinguer les informations d'entrées et de sorties des unités centrales 2a, 2b, cependant il s'agit des même bus de terrain 5a et 5b.On the figure 2 , we can see the two central units 2a and 2b each connected respectively via the fieldbus 5a and 5b to an input / output module 6. The fieldbus 5a and 5b are each illustrated in two parts in order to distinguish the input and output information of the central units 2a, 2b, however it is the same fieldbus 5a and 5b.

Chacune des unités centrales 2a, 2b reçoit et décode dans un premier temps les données provenant des moyens de traitement 9 du module d'entrées/sorties 6 (« RI »). Ces données contiennent des informations concernant l'état de l'autre unité centrale 2a ou 2b, l'état des bus de terrain 5a et 5b, l'état du module d'entrées/sorties 6 et l'état des capteurs ou actionneurs reliées à celui-ci dont les informations reçues sont représentées sur la figure 2 par les flèches pleines 10 pointant sur le bord du module d'entrées/sorties 6.Each of the central units 2a, 2b receives and first decodes the data from the processing means 9 of the input / output module 6 ("RI"). This data contains information concerning the state of the other central unit 2a or 2b, the status of the fieldbus 5a and 5b, the state of the input / output module 6 and the state of the connected sensors or actuators. to him whose information received is represented on the figure 2 by the solid arrows 10 pointing to the edge of the input / output module 6.

Ces informations sont analysées selon un certain ordre par plusieurs fonctions d'une partie « HA » du programme de chacune des unités centrales 2a, 2b séparées en blocs. Parmi ces blocs de fonction, on distingue le bloc de fonction « DIAG » qui permet d'analyser l'état du bus de terrain 5a ou 5b suivant l'unité centrale considérée, puis le bloc de fonction « CONTROL » qui contrôle les échanges de données entre les deux unités centrales 2a et 2b à travers la liaison Ethernet 12 entre les deux unités centrales 2a, 2b par l'intermédiaire du module d'entrées/sorties 6 et qui définie l'unité centrale primaire 2a, et enfin le bloc de fonction « DATA » qui collecte toutes les informations provenant de l'unité centrale primaire 2a et qui crée une table de données qui est transférée à l'unité centrale secondaire 2b par l'intermédiaire des bus de terrain 5a et 5b reliés au module d'entrées/sorties 6. Suivant la taille des données transférées, le transfert des données peut prendre plus qu'un cycle.This information is analyzed in a certain order by several functions of an "HA" part of the program of each of the central units 2a, 2b separated into blocks. Among these function blocks, one distinguishes the function block "DIAG" which makes it possible to analyze the state of the fieldbus 5a or 5b according to the central unit considered, then the function block "CONTROL" which controls the data exchanges between the two central units 2a and 2b through the Ethernet link 12 between the two central units 2a, 2b via the input / output module 6 and which defines the central unit primary 2a, and finally the function block "DATA" which collects all information from the primary CPU 2a and creates a data table which is transferred to the secondary CPU 2b via the fieldbus 5a and 5b connected to the input / output module 6. Depending on the size of the data transferred, the data transfer may take more than one cycle.

Ces données sont ensuite traitées par une autre partie « APP » du programme des deux unités centrales 2a et 2b qui va les encoder en données « WO » afin de pouvoir les envoyer vers les moyens de traitement 9 du module d'entrées/sorties 6 (« OA-A et OA-B »).These data are then processed by another "APP" part of the program of the two central units 2a and 2b which will encode them into data "WO" so that they can be sent to the processing means 9 of the input / output module 6 ( "OA-A and OA-B").

Ces moyens de traitement sont en mesure de sélectionner les données à prendre en compte parmi les données envoyées par les deux unités centrales 2a et 2b.These processing means are able to select the data to be taken into account among the data sent by the two central units 2a and 2b.

Le module d'entrées/sorties 6 transmet ensuite ces données aux capteurs ou actionneurs reliées aux entrées/sorties de celui-ci. Ces informations transmises sont représentées sur la figure 2 par les flèches pleines 11 issues du bord du module d'entrées/sorties 6.The input / output module 6 then transmits this data to the sensors or actuators connected to the inputs / outputs thereof. This transmitted information is represented on the figure 2 by the solid arrows 11 coming from the edge of the input / output module 6.

Ainsi, il est possible d'intégrer un tel module d'entrée/sortie 6 dans un automate programmable industriel modulable 1 afin d'appliquer une méthode de détection d'une défaillance et/ou de sécurisation d'un système électrique devant répondre à un niveau d'exigence de sécurité élevé sans qu'il ne soit nécessaire d'avoir recours à des unités centrales spécifiques fonctionnant avec un programme dédié au système à sécuriser.Thus, it is possible to integrate such an input / output module 6 in a programmable industrial programmable logic controller 1 in order to apply a method of detecting a failure and / or securing an electrical system having to respond to a request. high level of security requirements without the need for specific CPUs running a program dedicated to the system to be secured.

Comme il va de soi, la présente invention ne se limite pas à la seule forme d'exécution de module d'entrées/sorties 6 et de cet automate programmable industriel modulable 1 décrite ci-dessus à titre d'exemple, mais elle embrasse au contraire toutes les variantes.It goes without saying that the present invention is not limited to the single embodiment of the input / output module 6 and this programmable industrial programmable controller 1 described above by way of example, but it embraces the otherwise all variants.

Claims (8)

  1. An input-output module (6) for sensors and/or actuators comprising at least first communication means (13a) intended to communicate with a first central unit (2a) via a first fieldbus (5a), and at least second communication means (13b) intended to communicate with a second central unit (2b) via a second fieldbus (5b) comprising:
    processing means (9) arranged to:
    - establish a selection of a primary central unit between the first central unit (2a) and the second central unit (2b) taking into account: the operating state of each of the fieldbuses (5a, 5b) provided by the first bus (5a) and the second bus (5b) respectively communicating with the first communicating means (13a) and the second communicating means (13b), the operating states of each of the central units (2a, 2b) respectively provided by the first communication means (13a) and the second communication means (13b), and the viewing of information provided by the first central unit (2a) and the second central unit (2b) respectively communicating with the first communication means (13a) and the second communication means (13b), and
    - monitor the outputs of the input/output module (6) as a function of the information received from the selected primary central unit.
  2. The input/output module (6) according to one of the preceding claims, wherein the processing means (9) are arranged to send the two central units (2a, 2b) information for example concerning the status of the cabling, the status of the other central unit and/or the coherence of the information exchanged between the two central units (2a, 2b).
  3. The input/output module (6) according to one of the preceding claims, wherein the processing means (9) are arranged to compare the signals provided by the two communication means (13a, 13b) so as to verify their coherence.
  4. The input/output module (6) according to claim 3, wherein in the case of incoherence of the signals provided by the two communication means, the processing means (9) are arranged to monitor the outputs of the input/output module (6) as a function of a last-received coherent value and/or a default value.
  5. The input/output module (6) according to one of the preceding claims, recognizing and comparing the number of other modules (6) connected to each of the two fieldbuses (5a, 5b).
  6. The input/output module (6) according to one of the preceding claims, wherein the input/output module (6) comprises a local display device (8) for the information.
  7. An assembly comprising an input/output module (6) according to one of the preceding claims and extension input/output modules (4) connected to sensors and/or actuators.
  8. Configurable industrial programmable machine (1) comprising
    at least one first central unit (2a) and one second central unit (2a, 2b), the two central units being arranged to run a same program,
    at least one of the first communication means (13a) intended to communicate with at least one first central unit (2a) via a first fieldbus (5a), and at least second communication means (13b) intended to communicate with at least one second central unit (2b) via a second fieldbus (5b),
    at least one input/output module (6) according to one of claims 1 to 7,
    at least one sensor and/or at least one actuator connected to the input/output module (6) intended respectively to monitor and control an industrial process.
EP10159301A 2009-05-12 2010-04-08 Input/output module for sensors and/or actuators exchanging information with two central processing units Active EP2251789B1 (en)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
FR0953128A FR2945643B1 (en) 2009-05-12 2009-05-12 Inputs / outputs module for sensors and / or actuators exchanging information with two central units.

Publications (2)

Publication Number Publication Date
EP2251789A1 EP2251789A1 (en) 2010-11-17
EP2251789B1 true EP2251789B1 (en) 2011-11-02

Family

ID=41226297

Family Applications (1)

Application Number Title Priority Date Filing Date
EP10159301A Active EP2251789B1 (en) 2009-05-12 2010-04-08 Input/output module for sensors and/or actuators exchanging information with two central processing units

Country Status (3)

Country Link
EP (1) EP2251789B1 (en)
AT (1) ATE532135T1 (en)
FR (1) FR2945643B1 (en)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP2682826B1 (en) * 2012-07-02 2018-06-13 Siemens Aktiengesellschaft Automation system with output device
CN108614491B (en) * 2018-06-11 2024-03-15 上海海得控制系统股份有限公司 Communication system and method for programmable logic controller

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2561410B1 (en) * 1984-03-13 1987-11-20 Merlin Gerin PROCESS CONTROL ASSOCIATED WITH TWO REDUNDANT PROGRAMMABLE CONTROLLERS
WO1991008535A1 (en) * 1989-11-27 1991-06-13 Olin Corporation Method and apparatus for providing backup process control
WO2000036492A2 (en) * 1998-12-18 2000-06-22 Triconex Corporation Method and apparatus for processing control using a multiple redundant processor control system
US7213168B2 (en) * 2003-09-16 2007-05-01 Rockwell Automation Technologies, Inc. Safety controller providing for execution of standard and safety control programs
DE102005008556A1 (en) * 2005-02-23 2006-08-24 Universität Stuttgart Institut für Luftfahrtsysteme Aircraft controlling device, has decision unit provided to decide execution of security-critical control function on microcomputers and/or control units due to comparison of output data of microcomputers

Also Published As

Publication number Publication date
FR2945643A1 (en) 2010-11-19
FR2945643B1 (en) 2011-06-24
EP2251789A1 (en) 2010-11-17
ATE532135T1 (en) 2011-11-15

Similar Documents

Publication Publication Date Title
BE1025976B1 (en) DEVICE FOR PROCESSING DATA OF ROLLING EQUIPMENT
CN1685664B (en) Computer network with diagnosis computer nodes
US6907331B2 (en) Vehicle control system and apparatus therefor
US20130007319A1 (en) Method and system for implementing redundant network interface modules in a distributed i/o system
JP6121067B2 (en) Bus participant apparatus and method of operation of bus participant apparatus
CN110967969B (en) High availability industrial automation system and method for transmitting information by the same
EP2629203A1 (en) Method of electing an active master device from two redundant master devices
US20170212490A1 (en) Control and data-transfer system, gateway module, i/o module, and method for process control
EP3189381B1 (en) Two channel architecture
EP3599521A1 (en) System and method of communicating data over high availability industrial control systems
RU2510932C2 (en) Automation system and method of controlling automation system
JP6606293B2 (en) Method and device for monitoring data processing and data transmission within the safety chain of a safety system
CN105530220A (en) OPC-based interface method for realizing system communication of two different types of protocols
US20180373213A1 (en) Fieldbus coupler and system method for configuring a failsafe module
EP2251789B1 (en) Input/output module for sensors and/or actuators exchanging information with two central processing units
JP4328352B2 (en) Diagnostic method and system for external signal input / output unit
FR2841007A1 (en) Secure communication circuit for automatic control of buildings or power supplies has upstream and downstream buses with respective security monitors
FR2797333A1 (en) PROCESS FOR MONITORING A PART DURING A TRANSPORT AND / OR MANUFACTURING OPERATION
GB2623612A (en) Apparatuses and methods for non-disruptive replacement of simplex I/O components
CN116962184A (en) Method, system, terminal and medium for automatically deploying RoCE cluster
US20230147005A1 (en) Onboard device and sleep control method
EP2919421B1 (en) Ethernet switch, mobile machine and passenger bus including said Ethernet switch
US6934882B2 (en) Method and device to transmit data
FR2551897A1 (en) APPARATUS AND METHOD FOR REALIZING REDUNDANCY IN A PROCESS CONTROL SYSTEM, DISTRIBUTING
JP2004032029A (en) Network processing apparatus and setting method therefor

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

AX Request for extension of the european patent

Extension state: AL BA ME RS

17P Request for examination filed

Effective date: 20110202

GRAP Despatch of communication of intention to grant a patent

Free format text: ORIGINAL CODE: EPIDOSNIGR1

GRAC Information related to communication of intention to grant a patent modified

Free format text: ORIGINAL CODE: EPIDOSCIGR1

RIC1 Information provided on ipc code assigned before grant

Ipc: G06F 11/16 20060101AFI20110504BHEP

Ipc: G05B 9/03 20060101ALI20110504BHEP

GRAS Grant fee paid

Free format text: ORIGINAL CODE: EPIDOSNIGR3

GRAA (expected) grant

Free format text: ORIGINAL CODE: 0009210

RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: ABB AG

AK Designated contracting states

Kind code of ref document: B1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO SE SI SK SM TR

REG Reference to a national code

Ref country code: GB

Ref legal event code: FG4D

Free format text: NOT ENGLISH

REG Reference to a national code

Ref country code: CH

Ref legal event code: EP

REG Reference to a national code

Ref country code: IE

Ref legal event code: FG4D

REG Reference to a national code

Ref country code: DE

Ref legal event code: R096

Ref document number: 602010000348

Country of ref document: DE

Effective date: 20111229

REG Reference to a national code

Ref country code: NL

Ref legal event code: VDEP

Effective date: 20111102

LTIE Lt: invalidation of european patent or patent extension

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: NO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120202

Ref country code: IS

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120302

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: GR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120203

Ref country code: SE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: NL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: PT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120302

Ref country code: HR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: PL

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: LV

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: SI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

REG Reference to a national code

Ref country code: IE

Ref legal event code: FD4D

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CY

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CZ

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: EE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: IE

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: SK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: BG

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120202

Ref country code: DK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: RO

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PLBE No opposition filed within time limit

Free format text: ORIGINAL CODE: 0009261

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: NO OPPOSITION FILED WITHIN TIME LIMIT

REG Reference to a national code

Ref country code: AT

Ref legal event code: MK05

Ref document number: 532135

Country of ref document: AT

Kind code of ref document: T

Effective date: 20111102

26N No opposition filed

Effective date: 20120803

BERE Be: lapsed

Owner name: ABB A.G.

Effective date: 20120430

REG Reference to a national code

Ref country code: DE

Ref legal event code: R097

Ref document number: 602010000348

Country of ref document: DE

Effective date: 20120803

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MC

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20120430

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: AT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

Ref country code: BE

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20120430

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MK

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: ES

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20120213

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FI

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: MT

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: TR

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: LU

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20120408

Ref country code: SM

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20111102

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: HU

Free format text: LAPSE BECAUSE OF FAILURE TO SUBMIT A TRANSLATION OF THE DESCRIPTION OR TO PAY THE FEE WITHIN THE PRESCRIBED TIME-LIMIT

Effective date: 20100408

REG Reference to a national code

Ref country code: CH

Ref legal event code: PL

GBPC Gb: european patent ceased through non-payment of renewal fee

Effective date: 20140408

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: CH

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140430

Ref country code: LI

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140430

Ref country code: GB

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20140408

REG Reference to a national code

Ref country code: FR

Ref legal event code: PLFP

Year of fee payment: 7

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: IT

Payment date: 20160427

Year of fee payment: 7

Ref country code: FR

Payment date: 20160421

Year of fee payment: 7

REG Reference to a national code

Ref country code: FR

Ref legal event code: ST

Effective date: 20171229

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: FR

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20170502

PG25 Lapsed in a contracting state [announced via postgrant information from national office to epo]

Ref country code: IT

Free format text: LAPSE BECAUSE OF NON-PAYMENT OF DUE FEES

Effective date: 20170408

PGFP Annual fee paid to national office [announced via postgrant information from national office to epo]

Ref country code: DE

Payment date: 20230420

Year of fee payment: 14